50d90c9f2b33500b1ba83f916e0dd0a1

General

Target

50d90c9f2b33500b1ba83f916e0dd0a1
Size

56KB
MD5

50d90c9f2b33500b1ba83f916e0dd0a1
SHA1

3b49089bf331224cf14a047612b6ea541e160f3c
SHA256

0547176184f47f01a75b1f7b0c58082d59dc309e5af0a48e5aff9d2aab89f99b
SHA512

785ccb6628e4db091b5936f76b2d132dc7a68b54d78e516695c5aa3ee1995f7ac25cd2a502b9be4a4bfef2825f89fa4f94878cb586a640e85f568553224d82ec
SSDEEP

768:00EopiuOrUIyc+xRmbhrbEk174tfc/eoeLhl9sxIJKx+q:00Eopur/yx8rctU2oYnDS7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50d90c9f2b33500b1ba83f916e0dd0a1

Files

50d90c9f2b33500b1ba83f916e0dd0a1
.exe windows:4 windows x86 arch:x86

597e54ce89d8f1d2f670b6c0a103680a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringW
SuspendThread
GetLogicalDrives
SetEvent
CreateThread
MoveFileW
GetCurrentProcess
GetPrivateProfileStringW
FindNextChangeNotification
GlobalUnlock
DeleteFileW
FileTimeToSystemTime
GetUserDefaultLangID
ReadFile
CreateEventW
GetProcAddress
SetThreadPriority
InterlockedDecrement
GetSystemTime
FindResourceExW
GetCurrentProcessId
FreeLibrary
CancelWaitableTimer
lstrcpyW
GlobalAlloc
GlobalLock
GetModuleFileNameW
DuplicateHandle
GetCurrentThreadId
LoadLibraryA

user32

SetCapture
AppendMenuW
WindowFromPoint
GetSysColor
DefWindowProcW
SetForegroundWindow
GetKeyState
MessageBoxW
RegisterWindowMessageW
FillRect
EnableWindow
CreatePopupMenu
LoadStringW
LoadIconW
ReleaseCapture
wsprintfW
DrawTextW
SystemParametersInfoW

gdi32

Rectangle
BitBlt
CreateSolidBrush
MoveToEx
GetClipBox
CreateFontIndirectW
CreateRoundRectRgn
DeleteObject

advapi32

RegDeleteValueW
LookupAccountSidW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueW
RegNotifyChangeKeyValue
RegCreateKeyExW
InitializeSecurityDescriptor

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

597e54ce89d8f1d2f670b6c0a103680a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB